GoPlus Security 🚦 (@GoPlusSecurity): 🚨 Security Alert:
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
🚨 Security Alert: An attacker exploited an infinite mint vulnerability in a modified CW20-ICS20 token contract (secret1yxj...) on Secret Network, stealing approximately $4.67 million worth of assets from Axelar. Three transactions involving WETH, USDT, and WBTC were bridged into Axelar Network. The attacker subsequently transferred the stolen assets to #ETH. The exploit occurred on June 10, while Axelar and Secret publicly disclosed the incident to the community on June 19. Attacker Addresses: https://mintscan.io/axelar/address/axelar1hzra9z4zn8q0w8f3dj2wnw0xgetu8dfdhl6ad8 https://etherscan.io/address/0x6c2eAB82bA2897A6E99FB6Af018020dA15123976 Vulnerable Contract: https://mintscan.io/secret/address/secret1yxjmepvyl2c25vnt53cr2dpn8amknwausxee83 Example Exploit Transactions: https://mintscan.io/axelar/tx/C6F4F590B36EFF5FDCDE8996D9270AC3EE2DA243A3AC88E0F152FC074F9EB0FB?height=29841952 https://mintscan.io/axelar/tx/0072DE8548F12CC530A73B69FB494B690FDD4D7EFC5988236B07C1C354AC4E54?height=29842118 https://mintscan.io/axelar/tx/9DE90F7B5EE221351F4842FBEFC3F6B0A291C1EED846693BD3FC38730EB45AD1?height=29842126 Ethereum Receiving Transactions: https://etherscan.io/tx/0x3513509c71bc8e02695fad55e136b8f21933f6a4433f4dafe471800d98ca8e05 https://etherscan.io/tx/0xe49353d3a2b87d2f8ffaea85f26452d379ab186542b0bfeb552d5659efdf8967 https://etherscan.io/tx/0xde42dd558e9ccd70978c20529afacf0a94565d04aa798d1e38c32b4959d73343